📡 Tech & Security Digest — 2026-09-02

Curated from Hacker News, security blogs, and tech publications.

BleepingComputer

• Critical Langflow flaw exploited to steal OpenAI and AWS keys — Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building…
• Recently patched PaperCut zero-days used in data theft attacks — Two security vulnerabilities in the PaperCut NG and MF print management software, patched last week after being exploited as zero-days, are now being …
• SonicWall warns of actively exploited SMA1000 zero-day flaws — SonicWall warned customers that threat actors are chaining two new SMA1000 zero-day vulnerabilities in remote code execution attacks. […]…
• US charges Russian for infecting 80,000 freelancers with malware — A California federal grand jury has indicted a Russian national for his role in a phishing campaign that infected thousands of freelancers with TVRAT …
• Hackers abuse Faronics Deploy admin tool to install ScreenConnect — Phishing actors are abusing the legitimate Faronics Deploy endpoint-management platform to gain remote administrative control over victim computers an…
• Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks — Nearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a high-severity authentication bypass vulnerability that allows attac…

Hacker News

• I trained a small transformer in 1.5hrs and it beats many LLMs (621 pts)
• Apple reveals ‘shocking evidence’ from ex-employee’s MacBook in OpenAI suit (217 pts)

The Hacker News

• OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face — OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face last month, add…
• Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure — Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watc…
• Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication — Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company…
• Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server — cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which cou…
• PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions — PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print…
• Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE — Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow…
• NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions — Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that’s used as a proxy to…
• Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials — Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remot…
• Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler — Cybersecurity researchers have discovered additional infrastructure and previously undocumented malware associated with Nimbus Manticore, an Iranian s…
• Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity — Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck.

The vulnerabilities i…